Specifications
Command Groups
A-158
Rogue AP Commands
ʺRogueAPʺdescribesanaccesspointthatisnotauthorizedtoparticipateonthenetwork. Itmay
nothavethepropersecuritysettingsinplace.RogueAPscanpotentiallyallowunauthorized
usersaccesstothenetwork.Inaddition,alegitimateclientmaymistakenlyassociatetoaRogue
APwithinvalid
encryptionsettingsandnottotheAPthathas beenconfiguredforittouse.This
cancauseadenialofserviceproblem.
Thisfeaturescanstheairwavesandcollectsinformationaboutaccesspointsinthearea.Itlists
neighboraccesspointsfoundduringthescanintheNeighborAPDetection
Statuspageafterthe
scaniscomplete.
Inaddition,ifRADIUSisenabled,itperformsaRADIUSserverlookupfortheMACaddressof
eachaccesspointfound.ItreportsaccesspointswhoseMACaddressesitfindsintheRADIUS
serverintheNeighborAPDetectionstatuslist.It
reportsaccesspointswhoseMACaddressesit
doesnotfindasrogueAPsinthesyslog.
UsethecommandsdescribedinTable A‐16toconfigureanduserogueAP.
Table A-17 Rogue AP Commands
Command Function Mode Page
rogue-ap enable Enables the rogue AP feature on the
radio interfaces.
GC A-159
rogue-ap duration Sets amount of time to scan each
frequency channel.
GC A-160
rogue-ap
interduration
Sets amount of time to make frequency
channels active to clients.
GC A-161
rogue-ap interval Sets amount of time between scans. GC A-162
rogue-ap scan Scans the specified radio interface for
rogue access points and for neighbors.
GC A-165
rogue-ap radius Enables the access point to identify
rogue APs by performing a RADIUS
server look up of the MAC addresses of
all access points it finds during a scan.
GC A-164
rogue-ap scan Scans all interfaces for rogue APs. GC A-165
rogue-ap sortmode Specifies the parameter by which the
rogue ap report sorts the list of APs for
display.
GC A-166
show rogue-ap Displays rogue AP feature settings and
results of rogue AP scan.
Exec A-166